The code below is just to display a project by id. It is safe to do that without being logged in.

They cannot publish until they log in.

Once logged in, if they try to publish a project they do not own, it forces a remix.

I did remove the usage of email though. It was not doing anything.