Use req.user.id instead of req.body.userId for subscribe/unsubscribe