Pros and cons for token-based authentication and session-based authentication, any how to choose the proper authentication scheme for the application.