added basic current_user method and require_login filter