```ruby
class EmbedController < ApplicationController

  skip_before_action :verify_authenticity_token, only: [:inject]
  before_action :authorize, only: [:iframe]

  def inject
    @iframe_url = iframe_url()
    render 'inject.js'
  end

  def iframe
    @page = Page.where(url: params[:url]).first_or_create

    response.headers.delete "X-Frame-Options"
    render layout: false
  end

end
```

Attach user when a Page is first created.
user
```ruby
class EmbedController < ApplicationController

  skip_before_action :verify_authenticity_token, only: [:inject]
  before_action :authorize, only: [:iframe]

  def inject
    @iframe_url = iframe_url()
    render 'inject.js'
  end

  def iframe
    @page = Page.where(url: params[:url]).first_or_create do |page|
      page.user = current_user
    end

    response.headers.delete "X-Frame-Options"
    render layout: false
  end

end
```
assistant