auth template
use flask-login login and logout