Is using token authentication necessary in my case?
I'm building a web app that relies on a client side mvc that make ajax calls to the server with rails to get data from the database.

I thought that, since ajax call are made to a controller that require the user to be authenticated using devise, i had to use token authenticable to authenticate ajax calls.

But I've noticed that If the user login the normal way than since the session data is stored and sent with each ajax call it isn't necessary to use token authentication...

is this a bad approach?
Is using token authentication necessary in my case?
===

I'm building a web app that relies on a client side mvc that make ajax calls to the server with rails to get data from the database.

I thought that, since ajax call are made to a controller that require the user to be authenticated using devise, i had to use token authenticable to authenticate ajax calls.

But I've noticed that If the user login the normal way than since the session data is stored and sent with each ajax call it isn't necessary to use token authentication...

is this a bad approach?