put in flash alerts to application layer - also changed strategy for facebook login, only using info in authentications table now, not user and authentications tables