Login errors now use req.flash instead. post login redirects removed for now.