added login_required decorator to create_project function