flask-principal seemingly working