delete users
add permissions to projects

these use a whitelist, only users with permissions to view certian
projects can, while admins can view all projects
sign out link
no sign in link on the sign in page
don't show projects that can't be viewed

not all users can view all projects, so only show the list of projects
that a user is allowed to view on the index page (either equal to or a
subset of all projects)
remove duplicate sign up link
fix signing up

take user to an alternative confirmation page (that simply tells them
they need to confirm their account before signing in)