def before_request(): if not g.current_user.is_authenticated: return forbidden('Unconfirmed account')