return UserId in AuthenticateResponse