moving controllers to dashboard namespace
rollback to use application.js in application layout
authorise user except on autocomplete action