ensure you can't repeatedly add the same user to the same project