BUGFIX: fixed scope inheritance to get $scope.user in ProjectDetailController and better permission checking for superusers