require project_id GET param

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>
untested, but the logic is mostly in place for creating the pivotal issue

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>