can you put this if statement in the method, and then change the name to authorize user? it might make for a cleaner `before_action`