new Auth methods to avoid database access that GetCurrentUser does
check if it's possible to create a Requirement by checking existing Users and Projects