User pages do not consume flashes, so the flash about session token being sent is never shown

Likely the best idea would be to introduce flashes to the userland pages - they'll be useful at SOME point.

Also I'm starting to really dislike the way flashes are currently shown and I'm starting to dream of toast.