shifting responsibility from 'auth' to 'application'
observer and bind currentUser and isAuthenticated