Add flashes and secret_token.rb

Closes #10, ref #2