Added method to ensure user is current user in the user controller