adjustments to session configuration, flash messages, auth, etc