Hash user IDs when passing to API calls

[daronco]

Instead of passing the user's ID directly as the parameter userID in join API calls (see this), the gem could hash this ID with something like sha1 to make sure the actual ID that comes from the database is not leaked while still make sure it's unique and always the same for users that have the same ID.