fix: create new querypublisher for each message

Every user was using the same global queryPublisher, with the risk of one users message setting headers that were then used for another users response.