Fix sql injection
Hide create project if not logged in