Since this view is `@login_required`, `request.user` will always be set.