Looking at the examples, it looks like every login using auth0 is followed by a createUser mutation. Maybe I'm mistaken there?

you use the createUser mutation the first time the user signs into your app. Once the user has been created in graph.cool, you don't need to do it again on subsequent sign ins