CoreUser can now update the affiliated_records of a project to which
 they are a member, but not the description
added a second core_user record to affiliate multiple records
project_test tests core_user for update ability based on membership
ability passes project_test