Allow status and public fields to be blank, since they have defaults
Derive IsOwnerOrReadOnly from IsAuthenticatedOrReadOnly to cover the non-object-specific case
Use the complete set of Projects as the queryset on PUT/PATCH
Set href on error modal signin link