fixed security on editproject (close #2)