Setup authentication logic in Apollo server

[briri]

We need to add authentication logic to the Apollo server.

See: https://www.apollographql.com/docs/apollo-server/security/authentication

• [ ] Add a User interface to the system
• [ ] Add GraphQL schema for the User (query and mutations)
• [ ] Add a resolver for the User that works against the new RDS Users table for the system
• [ ] Add logic that can be used to validate a JWT User token

[briri]

Not sure if we will need this. It depends on how we are going to manage user Auth in general, Cognito with the Shib solution outlined in this ticket or if we will host Shib in an ECS cluster and then either host the logic for email+password authN here or in a Lambda or another external service.

[briri]

Plan will be to add passport to the Apollo server as middleware. We will want it to handle:

• account creation
• account sign in (validate and generate JWT)
• validate JWT
• account sign out (invalidate JWT)

[briri]

Decided not to use Passport due to its complexity and "black box" handling.

Instead, we:

• Setup a sign in/up endpoint for the frontend application so that users can create and account or login and receive a JWT using the jsonwebtoken package
• added @node/express-oauth-server to offer authenticate, authorized and token endpoints to support OAuth2 client_credentials, authorization_code and refresh token flows
• We will add an additional SAML handler for Shibboleth once we get that setup.