Where does "current_user" come from here?