moved back to flask-security in the framework app
adding the ability to secure endpoints using jwt
added user secret that can invalidate issued jwts; added more jwt api tests
added a critical file missing from the last few commits
added /auth/jwt/token endpoint to the frontend application