make all this have a login page, use ldap, put a logo on, moved some upstream stuff to static/ -- need to do more here to be consistent with bootstrap 5, but for another day

rating.py

@@ -1,6 +1,7 @@
 from wtforms import SubmitField, StringField, HiddenField, SelectField, validators
 from flask import request, render_template, redirect
 from flask_wtf import FlaskForm
+from flask_login import login_required, current_user
 from main import db, app, ma
 from sqlalchemy import Sequence
 from sqlalchemy.exc import SQLAlchemyError
@@ -37,6 +38,7 @@ class RatingForm(FlaskForm):
 # /ratings -> GET only -> prints out list of all ratings
 ################################################################################
 @app.route("/ratings", methods=["GET"])
+@login_required
 def ratings():
     objects = Rating.query.order_by('id').all()
     return render_template("show_id_name.html", objects=objects, page_title='Show All Ratings', url_base='rating', alert=st.GetAlert(), message=st.GetMessage() )
@@ -45,6 +47,7 @@ def ratings():
 # /rating -> GET/POST -> creates a new rating type and when created, takes you back to /ratings
 ################################################################################
 @app.route("/rating", methods=["GET", "POST"])
+@login_required
 def new_rating():
     form = RatingForm(request.form)
     page_title='Create new Rating'
@@ -66,6 +69,7 @@ def new_rating():
 # /rating/<id> -> GET/POST(save or delete) -> shows/edits/delets a single rating
 ################################################################################
 @app.route("/rating/<id>", methods=["GET", "POST"])
+@login_required
 def rating(id):
     ### DDP: should this be request.form or request.values?
     form = RatingForm(request.form)