Block access requests for non-existent projects

Thanks, faisalahmed @ HackerOne!