Thanks for the note! Definitely intentional: the callback comes back, but since there's no user ID, you hit the vanilla callback page.

(Basically, I wanted to make sure that everybody would have the card open... it's just the messages that are private)