added the json /checkpass url to app.py