Auth

проще!

`current_user.cards.find(params[:id])`