remove auth on projectscontroller