implemented GET /users/current with test authentication