Authorize exhibit access on the Dashboards controller; fixes #273