Only project owners can manage memberships and updated controller specs