I am using default guard `api` in Laravel and for front end i am using angularjs.

**Angular Js code to fetch data from server**

```
$http({
    header: {
        'Content-Type': 'application/json'
    },
    url: apiUrl + "apiViewProfile?api_token=" + $cookies.get("Token"),
    method: 'POST'
});

```

after fetching the result in front end, I changed username and password in database manually. but I am still able to fetch results because of token.

Should I send Username and password also in each request along with token?