this runs before user is created, use numeric IDs instead