using objectid instead of homebrewed uuid function; claiming responses when user signs in