access restriction beginnings

just figuring out how flask and redis worx :palm_tree:
untested