Auth controller no longer needs flash service