title: Restfull web application with oauth when client is also a website
body: <p>I am creating a solution that will contains a website and mobile apps. I will use Zend-Framework 2 for the website.
  So, to make it good, I am wondering if it would be a good idea to build :</p>
  
  <ul>
  <li>A REST web service (using zf2)</li>
  <li>Another website that will call the REST ws (using zf2)</li>
  <li>The mobile apps that will call the REST ws</li>
  </ul>
  
  <p>I will use OAuth for the autentication and security.
  My question is, if my website gets the data by calling the REST ws, it will have to make a database request at each call to check the token whereas if I do a "normal" website, my app will be able to use session to store the information of the connected user.
  Because, for what I have read, there is no such thing as session with OAuth/REST so for each call, I have one more sql request to check the token validity.</p>
  
  <p>Is it still a good idea to make a full REST service, even for the website or to have a "normal" website and also a REST service API just for the mobile apps ?</p>
  
  <p>Thanks</p>