verify user is in project