Session controller has flash message