validation moved to server side, improvements, flash scope, minor improvements