use session to show if user has logged in or not; bug fix.
add flash.html for flashing msg
delete useless args