added user management with flask-login