Update docs for session changes and FlashComponent

Update the docs for:

* Session method removals
* FlashComponent changes that were missed.
* AuthComponent changes.
isnt that authenticate() according to the current PR?