removed checking roles from dashboard controller