This is a bit redundant and quite unsafe. The `#find_tournament_and_rating_period` before filter already finds the tournament and it's scoped to the current user correctly