Tighten up security for questionnaires
Add more tests for sessions
Users can only do things to themselves