this logic could be moved into the Message model. The controller does not need to know anything about user_ids_to_show etc.