Limit /projects/:id/contributions for beta users

Implements #773.
I think it should be called `index?`. What were your thoughts about this name?