FEATURE 1h - audit refactor
- could pass activerecord as current_user
- user accessible