Open
Description
In my testing of the master branch I found that resolvers isAuthenticated and isAdmin in src/resolvers/authorization.js do not return, and so do not prevent the action their existance was intended to prevent. Perhaps I should create a pull request instead of an "issue"? I am new so please forgive me.