Donot let unauthorized users to view /projects