There's already a `user` accessor on SSO::Base, which SSO::Apache fills in with the CAS_USERNAME, so current_user isn't required.