Add password reset hint to flash message if incorrect username or password is given
Fade out flash messages more slowly
Make user tokens time-sensitive