idMatchesSession() takes options. Can choose source.
Add POST /ship/