added user id as parameter to secured method