cleared templating; flask-login capable