using flask-login, modify login session