implement require_user and helper method current_user