added user dashboard, changed access permissions