added current_user to application_controller