Added more authorization checking to project controller