So basically 1. Browser initiates connection with API server using supertokens cookies 2. API server validates supertokens cookies and opens websocket connection with backend server with an authorization header 3. backend server validates authorization header and starts streaming data to the API server 4. API server proxies all data between the backend server and browser