Protect against switching user id on same session