Added a spec to the pipeline_spec for graphql
queries to make sure the queries were returning
as expected.

Also made sure we were authorizing against the
pipeline instance in the resolver.