no longer using flask-wtf

Change-Id: Ibd18201a0bd72227f331a7143e1cd9c856c3b69f