Rather than a render, I would do something like this

```ruby
redirect_to access_denied_path, error: "Unable to update user."
```

..and add an ```access_denied``` method in the application controller (as well as a route to it in ```config/routes.rb```)