Feature/middlewareflags

forgot password flag constricts application access to api
added flags to middleware and a way to add them through mabi controller comments