Lock down project controller actions for admins only