Moving more ORM calls into user model from controller