* user_id removed from sessions