TL;DR: Most teams building multiple React applications make the same expensive mistake: they start each app as a separate repository. Authentication gets rebuilt.