Add an /auth unauthenticated endpoint and second authenticated /graphql endpoint