Flask declarative autorization