Found a bug where ajax was posting to the wrong user