Authentication

@aslawter , @mikeymurph77 
`flash.now` is used very rarely - it has its uses, but they're narrow. A better alternative, which you'll see in 99% of Rails apps, is just `flash` without the `.now`.

Also, usually I see `flash` being set to a string, not to an array. This is because you'll generally only have one flash message, set in one place. Only one controller should set the flash, so I'd use a string here.