Add security sub project, organization sub project, remove auth project (now handled by security)