factor out (get-user-id) to auth.clj
cleanup