Yep yep, it is unique, but `.where` returns an association so we need the `.take` to pull that (single) result.

I'm using `.where().take` here because it returns `nil` if the project id isn't valid, rather than throwing a `RecordNotFound` exception like `Project.find(project_id)`. By default `RecordNotFound` renders a  404 with an HTML page, which felt wrong for an API response.

This does feel kind of awkward, though... I think there's a way to control what gets rendered on exceptions, on a per-controller basis, so that would be cleaner. I'll look into it :mag: