Flash messages stored in session are html unsafe,

even if they were html_safe so we can't use html in welcome msg.
This is probably that should rails fix but meanwhile..