Stub out dashboard routes.
Add before filter to handle sessions for protected routes.
Extend core theme layout logic.
Add note in readme and begin depending on Rack::Csrf for tokens in forms.