use "addUserToRequest" instead of referencing request.params.userId