normal user dashboard shows their api credentials closes #36.