Without seeing the actual code base, `audio_filepath = audioSubmission['filepath']` smells like a security vulnerability. Also calling `decode` on a user object seems wrong...