FIX: can grant titles to regular users. Guardian initializer needs current_user, not the target user.