flask extension for defending against cross-site request forgery attacks (XSRF/CSRF)