actually we need to require the flash here, and include session in flash