Throw exceptions instead of die'ing.

Exceptions are a better method of doing this, plus it hooks right into
the flash mechanisms to report the error to the user.
Remove encrypted session.

This isn't being used because the flash is all local to the current
request using flashNow() rather than doing redirects and using flash().