Only fetch visible projects on overviews

Before this patch, the /issues page would list all the top level projects of
the redmine installation, no matter if the user had access to it.

This lead to a not so nice informations disclosures for installations where all
the projets are member only.

Note: this is my first contribution ever to a ruby project, so it may be dumb. It seems to work on my playground installation though.