added authenticated user and current_user.id