public projects still visible without logging in