Where does `current_user` come from?