Middleware to restrict viewers of proj to members

closes #54