astute overvation, that the nested :user hash with params is already set up the way that create() expects -- so no need to create a new hash, pulling the values out of the params hash. nice!