keep only user id in session