Think about authentication

[jstaffans]

http://rmosolgo.github.io/blog/2015/08/04/authorization-in-graphql/