complete chapter 4 regarding forms

- load flask-wtf
- use forms
- use session
- use flash