session based user auth, flash messages, bootstrap!