ensuring `user_id` is bound when loading from cookie