Forbid Flask-WTF (See https://github.com/mattupstate/flask-security/pull/152)