refactor conversations_controller a bit

use the user model to query conversations, so they *must* belong to the current_user