User_id in session validated