Check if current_user is defined in user serializers

This MR fixes a bug introduced in !104 (merged) where the current_user was used without checking if it was defined first.