Another draw back of using tokens instead of cookies is that tokens don't offer any security mechanisms similar to the Secure and HttpOnly flags for Cookies. Wi

Another draw back of using tokens instead of cookies is that tokens don't offer any security mechanisms similar to the Secure and HttpOnly flags for Cookies. Without these security controls they're easier for an attacker to intercept.