Authorization fixes

Fixes authorization so anyone can view the index page, but only admins get a dropdown to change the status of a project.  More will have to be done with this, but it works for now.

To test.  Give yourself the admin role and click a status for a project, you'll get a dropdown.  Then remove your role and click a status for a project, you won't get a dropdown.

Win.

Don't ask me why I made this PR at 1:45 in the morning.  Insomnia is awesome.
Where is this being set?