check for same partnerid, make session_id required arg