adds ugly flash message and cookie encryption