add deps for flask and oath