Lesson 8: Add current_user restrictions