made the current_user method and the ensure_logged_in method private