changing @user in app controller to current_user