Add pundit to handle authorizations
New DELETE /projects/{id} endpoint