removing flask-login
explaining routes