fixed bug involving hidden field user_id