added flash to sessions controller