user_id required for options, else login_url