adding some editing controllers to the api
added some security when adding users to as project
whiestapce