Removed white_list from _flashes as it was now double escaping HTML strings. html_safe for rest_resources.