support for forbidClientAccountCreation, flash messages, etc

- support for forbidClientAccountCreation
- integrate flash-messages package
- misc cleanup