added flash errors for form, passwords not matching, username/email already taken