title: how to secure azure mobile service / html - javascript
body: <p>When I call an oauth provider like gmail and I get the token back, how can I make sure that all future calls I make are from that same client that did the authentication?  that is, is there some kind of security token I should pass pack?  Do I pass that token back everytime?</p>
  
  <p>For example, if I have a simple data table used for a guest book with first,last,birthdate,id.  How can I make sure that the user who "owns" that record is the only one who can update it.  Also, how can I make sure that the only person who can see their own birthday is the person who auth'd in.</p>
  
  <p>sorry for the confusing question, I'm having trouble understanding how azure mobile services (form an html client) is going to be secure in any way.</p>