Moved current user stuff into it's own controller, made sure it works for null sessions