Another thing about this is that you're just taking whatever the user gives you and then embedding it on `/sets/:setname/play`. That's okay for this sample assignment, but you need to be significantly less trusting in real-world apps - not everyone will pass you a nicely formatted YouTube URL.