user_id -> sub to match openid_connect