Various Cleanup

tried to switch to userID, but it doesn't seem to be getting saved in
req.session.userID for some reason