[FIX] auditing user by id