Would it be too pedantic, since I failed to catch this last time, to suggest that perhaps ('auth-token', 'catalog') should be changed to something different than what is returned in the setup?  Since previously, the problem was that the side effect overrode the return value?

Or possibly assert that d1 and d2 have no result, prior to this callback?