Small Flask token auth server