Auth, deauth and flash messages