GraphQL Hacking: Queries, and Batching Attacks ( web2 focus )