Authorization to use the app.
Security for the app to access services.
If the app does not have a token, the app cannot access services. It provides a second level of authorization for the app.
Thinking about the term, where do you think origination of the term?