cipher layer now pass the x-user-id header to protected service