allergen_warning table has some validation. no session control yet