added flash messages to sessions_controller