fixed sessions, added before_action authenticate to Projects controller, all working