the id of the logged in user is passed as a query parameter. Not nice
but all the other methods dont seem to work