scidea-core: uses current_user if no spree_current_user available (assumes devise)