Add redirects from session controller
Add permission requirements to controllers
Add messages to dashboard index