set userid in session