CRUD Stuff for Projects

With specs.
I don't think this could ever be hit because of `verify_project_creator` and it redirects already