added flash message, password verification issue still exists