adding env variable to run vulnerability tests
adding flash message with validation errors, and redirect to sign_up