enforce client-side authentication, add Dashboard view with horrible introduction