membership dependent destroy on projects changed to :delete_all to bypass hook on at_least_one_owner