update to newer auth from flask-admin