adding in flask-security logins, and working on user api tests