user CRUD, flash messages