#370 Fixed a typo

changed $this->Auth->flash to $this->Session->setFlash