Removed more project permissions -- i.e., assume that log-in access is the primary scope for now. Should probably handle permissions elsewhere too. #25