ensure user_id exists in the database
better handling in auth test if next() is called unexpectedly