Is it safe to only use React with Auth0?