add spec for invalid form submission
point password digest to password if error occurs to user
add test for correct flash message when valid user form submitted
refactor flash tag