adding login management with Flask-login extension