to take advantage of authorization code flow in GIS, we need to add a backend to handle user auth and API calls