This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

Still, email is missing and the handling of user click.

The ui_cwTouchMail is not used, it should be removed in the future.

Also, fixed morpheus version: turns out one can unprefix without a
patch to current library.

https://github.com/morpheusgraphql/morpheus-graphql/pull/639#issuecomment-962113983