fixed controllers so they only display current_user information