fixed project creation bug.

removed permissions checks in the save method, moved them to create and update