The question to use or not use microservices often comes down to your team structure. Do you have one small team that does everything? Go with the monolith. Do you have a separate team responsible for authentication layer? Might be time to create a separate auth service so teams don't step on each other's toes and can drive their own delivery cycle.