The previous commit added g.user_id = ... but forgot to import 'g' from Flask.
This was causing 500 errors on all authenticated API endpoints.