logins robust w/ flash messages on log in/logout