Fix guest role form and make non-public project invisible to non-members (fixes #32)