Surely it would be better to be explicit that this controller expects slugs and not DB ids?