Make flask-login respect SECURITY_FLASH_MESSAGES

Since `flask-security` relies upon `flask-login` for the `@login_required` decorator, the latter module does not look for the `SECURITY_FLASH_MESSAGES` flag.

This pull request fixes that, passing `None` if that flag is set to `False`.