add unless statement to stop login breaking (current_user not being set)