Craig

Delay assignment of csrftoken in Graphiql

2

The `csrftoken` is currently assigned only when `graphiql.js` is first loaded. The current `csrftoken` can rotated by Django, for instance when a user logs in. [rotate_token](https://github.com/django/django/blob/3ff7f6cf07a722635d690785c31ac89484134bee/django/middleware/csrf.py#L118) performs the rotation. When...