passing current_user is redundant since it's available through helpers