Add authorization to project owner in user model