secure user's id