added a note about hardcoded credentials, added a prereq section for graphql-aura

Author: rsill-neo4j

modules/ROOT/pages/getting-started/graphql-aura.adoc

@@ -2,6 +2,11 @@
 
 This tutorial shows you how to create and use a GraphQL Data API in Aura Console.
 
+== Prerequisites
+
+Set up an AuraDB instance.
+Refer to link:https://neo4j.com/docs/aura/getting-started/create-instance/[Creating a Neo4j Aura instance].
+
 
 == Create a GraphQL Data API
 

modules/ROOT/pages/getting-started/graphql-self-hosted.adoc

@@ -105,6 +105,12 @@ const driver = neo4j.driver(
 const neoSchema = new Neo4jGraphQL({ typeDefs, driver });
 ----
 
+[NOTE]
+====
+Hardcoding your credentials like this is not advisable because it exposes them to anyone who can access your source code.
+In a real application, protect your credentials.
+====
+
 
 == Create an instance of `ApolloServer`