New admin_* mutations, improvements

September 14, 2020

NEW

• new GraphQL mutation admin_asset_update, which moves asset from one place to another based on physical_file_path
• add csrf_request_valid to context which evalutes to false if the request was triggered without a valid CSRF token
• new GraphQL mutations admin_graphql_*

IMPROVED

• do not allow to update private admin resources (like Page, Form, etc. ) via GraphQL, except for Model Schema