added user id and authorization