Also the solution could be to never use req.hawk.id in the database.