Make params for _setFlash() calls consistent.

All actions use $type for setFlash in the form 'foo.error', 'foo.success'. Only 'error.invalid_id' and 'error.invalid_http_request' have it the other way around. So it would be a good idea to make them consistent.