add flash to application layout
add flash message
force ssl in production