Dashboard

@titanous 

Dashboard app + server
Maybe just call it `key`? Also, a few tweaks:

```go
if password == "" && strings.Contains(r.Header.Get("Accept"), "text/event-stream") {
    password = r.URL.Query().Get("key")
}
```