removing old code in auth.js
Login error messages using connect-flash