fix to use sha for userid