deprecated authenticated_userid usage, get it from request