Lock down specific projects controller for admin only