user authentication - added user_id