Simply flash message setting in auth component.

AuthComponent::flash() had an unsed argument and unnessary flash config key checks.
When is message false?