extended auth API to return user_id