index is accessible without login. dashboard is not