Please don't use the normal `Exception` type here, it will cause a status 500 (Internal Server Error). Instead, we should either respond with 404 Not Found (So throw a `NotFoundException`) or 403 Forbidden (So make a new exception for that)