Locked down specific projects controller actions for admins only