Authentication re-rolled, multiple project adds, authenticated user is user in POST requests now