basic user auth added. unstyled flash messages