Remove the ! at the end of sign_in_as!(user)
Added admin flag to user.
Restrict access to project actions to admins only
Lock down specific projects controller actions for admins only
Add admin namespaced users controller