server-side test fixes:
- test authorization if a user has crossword approval and
  deletion rights for a specific project
- test project name minimum length