Is this last conditional branch for when the user is not signed in? Would it better to short circuit the whole action with a `before_filter` that redirects at that point?