allow authenticated user to view the dashboard