A simple permissions system for Flask