userid from authentication