Legal infrastructure for pandemic response: lessons not learnt in the US