added userID to auth var