Restrict access to project actions to admins only, with two failures in the sign_in_as