Update install to redirect correctly.
Use flashdata for messages over seperate page.
Move login sessions to database.