fixed project authentication (not auth befor new and create methods)