User id from form not request