login works
added flash message