What are the best practices for implementing nextjs with a custom backend like express or nestjs. Any guide on implementing authentication in this setup, (assuming the api is working and sends access and refresh tokens as http-only cookie and has a refresh route for implementing token rotation).