users can now login and there are flash messages