Allow all params on the projects controller.

There is already auth applied to who can edit a
project. We're not really worried about malicious
params here.