let userId = req.session!.getUserId();