added authentication using Flask-login