adding flash messages, and auth