We should deprecate forms and authorization policies. We have to encourage graphql record_create/record_update and validations in liquid