added current_user to customers, moved db check to controller