Review

Think about putting 'current user' in a controller / helper method so that the view doesn't have to query the session.