set current_user in application route for sessions