Every user was using the same global queryPublisher, with the risk of one users message setting headers that were then used for another users response.