Hey! We're working on an updated example. The way that we handle authenticate for zeit.co/dashboard is that we do authentication client-side and show a loading "skeleton" of the page while data is being fetched.
Authentication itself is being handled by a httpOnly cookie that is available to our API endpoints.
If you were to use getServerSideProps you also have access to that cookie as it always runs server-side.