move authrest & userrest off flask
take session argument directly
check GESTURE_ENV before running tests
add between
add json
request: inherit from werkzeug.request
mount: fix indentation
exceptions: alias BadRequest