no more using user_id client side