Document that these are expected.  Add errors if they are missing.  Also, should we be using the `req.session` for managing sync state or should this live on the `sync` object?  Should the `sync` object itself go on the session (might solve our timeout issue?).