registrations and authentication controllers point to marketing, moved required signin from projects to application controller
authorize owner and authorize membership methods in projects_controller, user.rb