Ajax update

Never _ever_ *ever* use the `@current_user` instance variable!  There's something you're not understanding about how `current_user` works.