changed access to flash to be more consistent.
the flash object is now as follows:

flash: {
  message: ['here is one message', 'here is another'],
  error: ['here is the first error', 'here is another']
}

This seems to be how it was intended to work, but I was finding
that flash was a list holding further lists when using
req.flash, where it was working as intended through
res.flash.
merge resolved