on mutation callbacks: when a handler (url) is called, payload can be added (graphql query), but is it possible to add headers (e.g. authorization header?)