We will need to be able to access data in Arches as an authenticated user in order to access restricted business data. One possibility would be to create a [Koop authorization plugin](https://koopjs.github.io/docs/usage/authorization) that would use [Arches authentication API](https://arches.readthedocs.io/en/stable/api/#authentication) on the backend