add close for flash message
remove deviceLocation from header; add session check before creation/deletion