title: Django Rest API: Using both token authentication and session authentication
body: <p>I've tried to implement two ways of logging into the Django API: token-based authentication and session authentication.</p>
  <p>Token based authentication works fine when session based authentication isn't implemented, but when I activate session based authentication, the token based authentication endpoint only returns &quot;&quot;CSRF Failed: CSRF token missing or incorrect&quot;.</p>
  <p>Now, I know with session based authentication I need to set the csrf header, but is there a way to bypass this for specific endpoints, or for when a token auth header has been included in the request?</p>
  <p>Thanks for any answers :)</p>