I like how this verification is being done right here sort of as a middleware step so it's really clear looking in the routes that these routes are protected behind verifying the poet's access, but the parameter that's being passed in feels a little awkward since it's hard to know what it is without looking at the body of `verifyPoetAccess`. I totally understand what it's doing, but it would be nice if you could just pass in the actual `poetId` somehow. I'm sure you wrestled with that one a bit. I'm just curious about the process you went through to arrive at this solution and what the alternate options looked like.

Did you like it better inline like this than calling `verifyPoetAccess` in the bodies of each handler method (`poems.edit` and `lines.create`) where you could lookup the `poetId` and pass it in directly?