yeah it's a mess. I wrote the TODO before fully understanding the problem. I'm removing this TODO now because it's not a regression.

Fixing this is part of the further refactoring I think is needed (regardless of this change). Currently each message contains the userId, userType, etc.
It should not be the case. Since we are relying on sticky sessions, we should not have to send these each time. I think it will be easier to do after we implement oauth.