Lock down specific projects controller actions for admin only