Lock down project controller actions for admins only - hide links