added cancan to authorize project access