Moved flash messages from auth.jade to signin.jade. Placed within error div.
Added check for empty salt before attempting to encrypt password. If you sign up with OAuth provider and then try to login with Email (local strategy), the Salt is empty and authentication fails.
Merge pull request #173 from andrunix/master

On the signin page, the error div was always visible even if it was empty.