[IMP] Do not include a plaintext password in error mails
[MIN] Use the new flask/werkzeug versions