Whoops, forgot to secure the "new paste based on ##"
Use `.to_param` instead of `.id`.