Only exposing the project models when the user is authenticated to tighten security.
Merge remote-tracking branch 'origin/feature/hide-models-unauth'