can we say what %%USER_ID%% is?   i.e. it's not username, it's not email address, and it's not the primary key of the user in the database.  It's a persistent pseudonym generated via a keyed hash.