We shall use current_user.id, not just id