users can't force navigate to projects they aren't members of