fix for protected current_user