Also include graph in authenticated part of request

It was possible to reuse the same apikey+token for processing
a different graph, which could be used to gain access to free computing time.