fix flash message
add order filter
modify auth filter. redirec to last page once login