Add CSRF to graphql requests

[oliverzheng]

No description provided.

[joshjcarrier]

You wanna do rate limit too?

[oliverzheng]

Sure why not. Not sure how to do that without adding stuff to the database though.

I think security has a higher priority of dealing with spam so we can add it later when/if we have a lot of traffic.

[joshjcarrier]

https://www.npmjs.com/package/lambda-rate-limiter Is a good simple start in case we accidentally dos ourselves

[oliverzheng]

Oooooo.

We should have just done npm install lgtmeme since there seems to be a package for everything.

[joshjcarrier]

You mean yarn add lgtmeme