Reimplement user_id migration

[zachpmanson]

This didn't make it into the react rebuild. Maybe even come up with a clever new solution to this problem to make it actually secure.