[DO NOT MERGE] 670 user should not be able to add public form to project

closes #670