fix 3 of x - security we also dont need this user id field which prevents spoofing