add auth to dashboard route