moved load current user method to app controller and implemented some auth on project controller