fix: Session error is never cleared

Author: kenjis

src/Authentication/Actions/Email2FA.php

@@ -92,7 +92,7 @@ public function verify(IncomingRequest $request)
 
         // Token mismatch? Let them try again...
         if (empty($token) || $token !== $identity->secret) {
-            $_SESSION['error'] = lang('Auth.invalid2FAToken');
+            session()->setFlashdata('error', lang('Auth.invalid2FAToken'));
 
             return view(setting('Auth.views')['action_email_2fa_verify']);
         }

src/Authentication/Actions/EmailActivator.php

@@ -71,7 +71,7 @@ public function verify(IncomingRequest $request)
 
         // No match - let them try again.
         if ($identity->secret !== $token) {
-            $_SESSION['error'] = lang('Auth.invalidActivateToken');
+            session()->setFlashdata('error', lang('Auth.invalidActivateToken'));
 
             return view(setting('Auth.views')['action_email_activate_show']);
         }