Also, I moved this block up so that it doesn't even bother to make the call to the middleware if it's a model you're not allowed to use.