tighten security:  only owners can edit projects on projects#index
tighten security:  projects#show only shows edit link to owners, projects#show only accessible to owners & viewers
tighten security:  non-owner visiting projects#edit redirected to project#index