move bookmark creation back to controller for callback (due to options needed in after_save), set bookmark user from current user on creation