fixed current_user method in application controller