simple Flask app with flask security