Add logic to authenticate traffic

[briri]

Some of our GraphQL endpoints should be public, but the majority should NOT, so we need to explore how to manage this within the Apollo server system.