Added logic and test to ensure users see only projects they are authorized for