Code Review

Why do you have the `:id` in the url if you get it from the session?