The scope of this may not just be limited to this PR (since from a cursory glance it appears the rest of the new dashboard works this way), but I'm pretty sure that we don't want to be passing the message in a GET parameter.  That seems like a lot of data to stuff into a URL.  I think this should naturally be a POST, no?