The client can know the userId from `/my-profile`. Let's discuss this on the mailing list when we come back to it.