Update requirements.txt

sod it. yes, flask-login is still required, but not until the bug is fixed in the latest pip version