How do you see auth with GraphQL and general architecture? 1) login request by REST and get token in response 2) GraphQL request with (peridot/header "Authorization" "bearer 89abddfb-2cff-4fda-83e6-13221f0c3d4f") or something like that 3) Download PDF etc. by query to the GraphQL which return URL? Directly to REST? I want to have single point API. Auth by GraphQL? It seems to be hard to do. With lacinia? Somebody did it and can share how?