flash+session scopes as injections