user authentication. current_user now availble