FYI, you don't have to use the `setup` method.  It is useful primarily when you need to run some code whose results are useful in both the `authorized?` and `handle` methods (e.g. if `authorized?` used `@username`).