change username check to user_id for if the person is logged in