Split out meta results
 - draft auth tokens see only draft results
 - non draft auth tokens see published results
 - Restructuring the checking of authorization headers to lessen code duplication and null checks