insidevault: add more tests and fallback to userId if no orderId