fixed current_user method bug in app controller