Only exposing the project models when the user is authenticated to tighten security.