add flask-wtf to requirements