Simply flash message setting in auth component.

AuthComponent::flash() had an unsed argument and unnessary flash config key checks.
On second thought keeping this method makes testing easier.