improve security access
only allow user to view his own projects