graphql server from scratch with authentication