basic infrastructure for flask-security