ensure that dashboard only load user's own form definitions