Handle login url ourselves and merge into one python file
Use abort(401) instead of redirect(302)