add current_user method and authenticate
rspec test for signing out