fixing session timeout to check if current_user