A valid user should be identified using the UserID