Serve dashboard as part of the application

[niklasvincent]

Either on / or /dashboard.

Might be worth creating a new end-point that exposes all approved domains, so that the dashboard can simply display those.