Got flask-security to work need to write a better method of securing the API methods other than using @login_required