Maybe put in a test to make sure we're using the check_session_id decorator? Also, I know we're not doing this anywhere else (maybe we should be) but we should probably test that we're not getting data for any other res_id (and/or try different res_id's and make sure they each give the correct data). I don't think going back and retrofitting is part of this, but maybe we could start here and add a test that tries two different session_id/res_id pairs and makes sure the correct collections names are returned for each?