secured signup/signin with bcrypt. changed duration of flash messages