is `current_user` really costing that much?