Check rights when an user retrieve a project (check if he belong to it)
Check user's rights when he wants to see status (check if he belong to project)
Add POST /project and his tests
add GET /project/:id/status et test