move current user's data to its own controller instead of application controller, force reload user object when user logs in