UserId is acquired from cookie