made modifications to urls and views so that user_id does not need to be passed from client, inferred from the session.