Extempt graphql API from CSRF.

openlobby/urls.py

 from django.contrib import admin
 from django.urls import path
+from django.views.decorators.csrf import csrf_exempt
 from graphene_django.views import GraphQLView
 
 from openlobby.core.views import IndexView, LoginRedirectView
@@ -8,5 +9,5 @@ urlpatterns = [
     path('', IndexView.as_view(), name='index'),
     path('login-redirect', LoginRedirectView.as_view(), name='login-redirect'),
     path('admin/', admin.site.urls),
-    path('graphql', GraphQLView.as_view(graphiql=True)),
+    path('graphql', csrf_exempt(GraphQLView.as_view(graphiql=True))),
 ]