I'm in a React (FE) Nest.js (BE) stack, is it correct that I can either: • Login in FE with Kratos flows, do a REST call to BE where it checks the cookie with another Kratos call (pretty heavy so I need to cache it) • Login in FE with Kratos and use Oathkeeper as proxy that forwards to BE