We're asking for this here, but then never using it.  We should have some kind of middleware for all these routes that makes sure the `connectionID` refers to an existing sync session, and error if not.