Bugfixing - using @current_user.id instead of sesstion[:user] because session object can not be prepared if using token authentication