Authentication for users is working, update actions are limited to project creators, need to do that with destroy