GraphQL policy - accessing user

[al_dev]

Well if anyone comes across this…
If you don’t set an authorization header (Bearer) there will be no user.

Seems kind of obvious when I actually write this down