Use user._id for project owner