Manage users with Flask-User

Switch to Flask-User for user and role management.  This also adds
password hashing.