Don't let people change user_id for objects
99% coverage, yay