We can skip the session retrieval and just set current_user to nil when the session cookie is blank
Attach a file by drag & drop or click to upload
