control.rb current_tenant handles nil case