authorize currentUser binding