re #343: Add slash before or after token in flask-security URLs correctly