added helper to find current_user and reworked controllers to use it