introduce connect-flash and express-validator
a bit closer to registration
neat
fix in locals.user