[fixes #8] - unvalidated projects are accessible by admin & editable