ensure question_id is always nil or positive int

[#66360102]
verify appearance_lookup used only w/ question_id

when setting appearance_lookup, verify that session has question_id.
when finding session using an appearance_lookup, verify that a question_id was sent.

[#66360102]