user string version of ObjectId for userId in a UserIdentity