added flash message to auth