flask-security style login/logout finally works