Check for permissions when returning projects
Include entire user object in ProjectSerializer