put user_id in session