use session to store user_id