updates controller to use spree_current_user