More production fixes

* renaming routes to proper names
* attempted to provide flash output to logins