Form-based authentication

I'm building a form-based authentication system for a Quixote-based 
website and was wondering what role (if any) do form tokens play in user 
authentication? The form tokens I'm referring to are the random numbers 
returned by Session.create_form_token() in the session module.


Thank you,
Salman