Could you clean your configuration (remove all commented parts), it's pretty hard to read.
I repeat: I strongly recommend to use the secure mode for routing, the insecure mode is not made to do routing.
To understand the concept:
The infinite loop (/dashboard/dashboard/...):
If you use the api@internal the infinite loop will disappear.