add login form
add flash message when validation fails