login required to post update, also added a created_by to projects and updates