Set user_id to resources, playing with secrets