added filter exceptions
using unless instead of !if
removed an unused exception
added permission support into downloads controller
added dummy update action
let dashboard controller handle / via all protocols and render empty json on request
typo