replaced userId with projectId...multiple users can access the same project