only keep userId in sesstion not changed totally