DRYed up the controller by adding a before_filter to grab the user