flask-security starting to interface with latest REST API