add flask-storage dependency
try catch it
remove useless authorization