fixed project edit permission on user#show