now checks to make sure the user is authorized before creating a project 549