Does embed app must use session token?

Hi @marv1nnnnn

I think all of your points are correct. Embedded app is highly recommended to use session token if it needs authentication.