implicit session, flash in views; some errors yet