Locks down projects controller actions for admdmins only