moved current_user to a helper module for application controller