Right now, if you have a refcode in your create sample request, it will get dropped. However, this is a useful mechanism to prevent duplication without needing to lookup whether every refcode exists (i.e., try to make the object and check if a duplicate error is raised). So, instead, we should allow the API to be passed refcodes, failing with duplicate error responses if present.