no userid check