Hello,
I've started reading up on security (particularly authentication) with web services and I see a lot of references to security token services.
From what I see, they take a username-password (or something) and, on validation, return a digital token. How is using this token any more secure then just relying on the username-password in the first place?