normalize fake-userId, prefix with * and UPPER case.  update log format to use "," to seperate userId