[FIX] use the github branch of flask-security, because there is a fix by christophe