require login for viewing Projects.
tweaking permissions stuff.  still wrong but getting there.