restrict access to project actions to admins only
lock down specific projects controller actions for admins only