Are you open to using parse-server? It has good auth API's built in.