This will fail if the user can't be found. Use `get_object_or_404` or similar.