User.pm: do not require Project.pm until remove called