flask exposed to outside (with debug still running, BAD)