title: How to secure my AngularJS and Web Api application
body: <p>I am using AngularJS with ASP.NET Web Api server side.  Seems to me like authentication has now become a breeze?  Or is this too good to be true?</p>
  
  <p>So I'm thinking of using the Web Api's "Individual User Accounts" authentication.  And I am thinking that is all I need.  As long as every request is authenticated and noone can get any data they shouldn't I shouldn't need to do much more right?</p>
  
  <p>Or am I missing some key security fundamentals?</p>