Best practice to manage users and access to a Web-API in python? [closed]