[9.3 security fix] Renders 404 if given project is not readable by the user on Todos dashboard

See merge request !2118