Get userId from req.user instead of route