added rack-flash to gemfile, notice if passwords don't match