user id is stored and read from http session