I'm not sure about this removing the body could seriously break some stuff. We could alternatively
* just add a waring to the docs to take care when using flash with password form
* fix Scope.Params.flash to skip the 'body' when creating the flash variable (I agree it seems weird to flash the body parameter - nobody will repost it I guess)