change git ignore, add config.py
add csrf config with flask-WTF
add login form & html
validate_on_submin in login
form field validation
add provider at OpenIDs