secure actions in projects controller