Allow users to only see themselves (@auth)

[alaister (Alaister Young)]

I’m using Slash GraphQL, so v20.11.2.
I don’t think it’s because of a null variable in my custom claims though, as that same user variable works elsewhere.