moved current_user under Session helper