injecting userId & session bugfixes