logged in user ids are hashed and salted