session: corrected current_user assignment (on controller)

Was assigning to new local var.