Made login and password_change use flash messages.

Since flash messages are css'ed and easy to use, I converted the login
and password change pages to use flash(), rather than parameter
passing.