Bug Fix: Users could spoof replies to decisions

Prevents users being able to spoof replies against decisions
to which they do not belong by checking membership based on the
decision id.