I know you didn't add this, but this is definitely a red flag in that it loads all of a project's users into memory at once.