You can customize the login message via
auth.messages.logged_in. However, you won't be able to include the username in that message because it will not be known until after the login. Instead, you could append a callback function to the
auth.settings.login_onaccept list, and in that function, you could explicitly set:
session.flash = 'Welcome %s' % auth.user.username
Anthony