pass in user key instead of user id