fixed ordering of middleware

wrap-noir-flash has to come before wrap-noir-session in order to work correctly