8.1.1 Sessions controller.
8.1.5 rendering with a (wrong) flash message.
8.1.5 flash.now does right for this case.
8.2 Sign in and out with remember token features.