Explore putting userId on req.body rather than req.session.passport
Explore putting userId on req.body rather than req.session.passport