this should be a foreign key into the users table