Add query string to validation

[marcwickenden]

This is a simple change which ensures the query string parameters are included in the validation.

As an example you may have a security scheme as follows, which was not being checked.

"components": {
    "securitySchemes": {
      "apiKey": {
        "type": "apiKey",
        "in": "query",
        "name": "apiKey"
      }
    }
}