use built-in current_user; setup mistune;