auth filter for projects and unauthorized blade