fix current_user monadic lookup
add authentication filters to user controller