Probably makes sense to move this into the base controller under `protected` instead of repeating it twice.