Currently, our own login process is woefully insecure. We need to make sure that the password is kept as secret as possible. How? SRP. There are lots of resources out there, and probably even some flask examples. Meteor SRP and python SRP together should do the trick pretty well otherwise.