(I pair-wrote this comment with Tristan)

On second thought, this isn't quite true, though this check is still unnecessary so long as we use `User.find` above. If there is an invalid ID passed to `User.find`, it will raise `ActiveRecord::RecordNotFound`.