"phonenumbers" and "closure" have only pre-release, specified min version to have "pip install -e ." complete without complaining
added missing deps; fixed imports and  CSRF_ENABLED flag for new versions of flask-wtf