Using session flashes to store access token between request instead of session storage kludge