https://akingscote.co.uk/posts/role-based-authenticated-restful-api-python-flask/