implemented flash messages
made username and password mandatory in forms, as it should be
properly added flash messages to all templates/routes