Extract ownership check to before_action where possible. Remove old commented-out code.