decoupled flash from session; set mongo as default session manager again. fixes #32