add book/movie policy and fix current_user problem