comically insecure web-app for deploying a flask app that just runs commands you pass it