security on projects api
dependency on esqueleto