maybe use current_user_or_visitor here instead of current_user ?