Add rights object to project serializer

It closes #34.