Using current_user instead session hash