Forgot to check for current_user first.