@agartha what is proper authentication?

Protecting routes, storing the JWT token, using it in GraphQL queries, dealing with expiration, etc.