fixed redirect bug in set_current_user in app controller