add flask-login to requirements.txt