Add User#guest? and User#admin?. The first created user is an admin; no others are. Only admins are allowed to access the Dashboard.