added current-user controller