no more redirect to new_session_url on sign out
flash errors on page for login error instead of redirect