changed Incident to store userID instead of User