added authorised user to project controller