fix current_user auth bug - revert to where mongoid statement