added project model
added cancan for authorization