Lock down specific projects controller action admins only