R Systems interview question

Session vs token based authentication