owner or admin should be able to modify owner

also should be able to remove project association
fixes #410