Return users & permisions for forms & projects

closes #335 
closes #334