add current_user method in base_controller and use in authorize_request