obtain userid from tokeninfo endpoint so it no longer needs to be hardcoded