Force userId to string when returning it in a response
Add more tests for zap.authenticate()