add project index path for logged in users and start of basic permission model