Restrict certain projects controller actions to admins only