let flask-security handle password issues