session wasn't marked as 'dirty' after adding flash