Factor out auth helpers
Add spec and code for project show action