refactored permissions and added update_project_member ability logic. Also refactored owner methods to a concern.