customize resource models __init__

only allow a subset of fields to be set in init.
and assign resource to current_user for default.
only allow resource creation when user authed
simplify chart edit page & control.
simplify dashboard page & controller.