You can move this into an action callback `before_action :find_user_by_token, only: [:edit, :update]`