670 user should not be able to add public form to project

closes #670