people not logged in now can't access /dashboard