update to users and sessions controller with the flash message
update to the readme