Implement restore, so that session survives page reloading. Remove currentUser from ApplicationController, and use session instead.