add flash message when create something
ignore authenticity token at login