add userurl field; a bit of / styling
add flash messages to /, including (lying) validate msg
/validate now seems to work

but flash messages are broken?

closes #2