more API features

1. get shock preauth link instead of file with download resource (add link=1)
2. /pipeline resource update, pass queries to AWE /job?query