Remove flask security.

Use raw flask login instead so that we can plugin additional steps to
login flow, i.e. calls to matching service and ownership service.
Fix merge conflict
Bit of cleanup
Fix tests
Make password write only
Merge pull request #40 from LandRegistry/move-to-flask-login

Move to flask login