Limit frequencies to cohorts in projects users have permissions on

Fix #369.

Signed-off-by: Don Naegely <naegelyd@gmail.com>