Set up security on parent, permit fields in controller, login w/ authentication and session id, create dashboard.  Did same for child