Add API for showing last ticket

Add API action for a single project with last ticket.
Restrict projects API to users with permission

Restricting projects API show to only users who have permission to view
a project.