move to flat org layout, separation of code. prep for flask-peewee and flask-Security
fix privacy bug