feat: implement basic authorization and flash messages #3