Client-side gate only. This checks the password in your browser.
It deters casual access; it does not protect the data from anyone who
opens the file directly or reads the page source. Put the dashboard
behind server-side authentication before treating it as secured.