FYI `user.save` is unnecessary here because you're using create. You should check `user.valid?` to see if there were errors during `create`. You don't need to fix it in this PR.