removed all direct references to flask-login