Removed auto setting of user id in has_capability

It's not required and could cause security flaws