remove session id, use user id
remove session id, use user id, and fix a small bug