Simply flash message setting in auth component.

AuthComponent::flash() had an unsed argument and unnessary flash config key checks.
IIRC at some point someone wanted the ability do disable setting flash message and that is done by setting `authError` to `false`.