set current_user for api calls