Thanks - this solved my problem. You are wizards 
However it does not work if the token contains the letter &.
And it is my misinterpretation that the auth_token also was checking mutation operations.
Keep up the great work
Cheers
Erlend
Thanks - this solved my problem. You are wizards 
However it does not work if the token contains the letter &.
And it is my misinterpretation that the auth_token also was checking mutation operations.
Keep up the great work
Cheers
Erlend