Simply flash message setting in auth component.

AuthComponent::flash() had an unsed argument and unnessary flash config key checks.
Did the behaviour change becuase of the added startup call?