Simplify setup and pull query-prevention into model

app/controllers/webhooks/activations_controller.rb

@@ -1,14 +1,10 @@
 class Webhooks::ActivationsController < ApplicationController
   before_action :ensure_admin
-  before_action :set_webhook
 
   def create
-    @webhook.activate unless @webhook.active?
-    redirect_to @webhook
-  end
+    webhook = Webhook.find(params[:webhook_id])
+    webhook.activate
 
-  private
-    def set_webhook
-      @webhook = Webhook.find(params[:webhook_id])
-    end
+    redirect_to webhook
+  end
 end

app/models/webhook.rb

@@ -40,11 +40,11 @@ class Webhook < ApplicationRecord
   validate :validate_url
 
   def activate
-    update_columns active: true
+    update! active: true unless active?
   end
 
   def deactivate
-    update_columns active: false
+    update! active: false
   end
 
   def renderer