It tells angular to send the session cookie over with the request.  By default it won't and we won't be able validate the authZ token.