use request.session.flash for toaster notifications