title: Persisting a security token between calls
body: <p>We are creating a prototype application as follows:</p>
  
  <ol>
  <li>We have a html web site using knockoutjs</li>
  <li>Using qQuery/Ajax it communicates with Web Api services</li>
  </ol>
  
  <p>We only want the services to be accessed by authorised users. So we have written in security that can validate the user based on username/password</p>
  
  <p>So next I guess we need to pass back some type of token to the client which it uses in further communications with the API services. </p>
  
  <p>What I would like to know is how this is stored on the client so it can be passed back to the server again for the next call?</p>