[authentication] use flask security
[authentication] sign-in/sign-out users