unit tests for GET /
remove the session.shareLink on a later step