* Hooks and team pages allowed only for masters/owners
* Group page allowed for admin
* Corrent authentication for Projects controller
* Hide some project elements from visitor

Didn't bother with files in db/, config/, or features/

Uses the first key that the user has for testing post receive hook.