(CDAP-355) Insecurely pass userId from Router to downstream processes