make session property protected to allow subclassing
Merge pull request #1 from elseym/master

allow subclassing of FlashMessageHelper