#7 part2. check auth to access projects