fighting current_user not being available in API controllers