- verifies loadFromBolt accepts a legacy opaque service session token for its owning api session - verifies loadFromBolt rejects an opaque service session token presented under a different api session with an InvalidSessionError