Congress can finally close a mass surveillance loophole — but will they?