[bogomipz]

Why are tokens preferred over cookies for a publicly accessible API?

[bpicolo]

There are all sorts of cases where managing cookies is annoying when interacting with an API, like via curl. There might be other reasons as well, but making consumption easy is probably reason enough