oops, forgot to remove hard-coded user ID