most rails apps have a current_user method in ApplicationController for a good reason. this commit also adds a little documentation on why our User.current approach is problematic.