Tighten up flash messages and auth provider requirements