Alternately, we could revisit the idea that encrypting the userID was the right way to approach this in the first place, and you could ask me to implement in a completely different direction without encryption; all the alternatives I could think of remain at #847. 

There are many options. Sadly, one of the options is not being confident I know how to do this completely securely in Rails 3 through 4.1.