sudaisnazir2381-lang/Code-Red ? reverse-engineered prompt

Build me a web app called CODE RED that teaches web security by letting users play through a set of hidden vulnerability challenges. I want a normal login and sign up flow, then a game page with around 50 code snippets split into four difficulty levels where players read the snippet, spot the flaw, and type the vulnerability name to earn points.

It should support real user accounts with secure password hashing, session based login, and a protected admin area for managing users, viewing progress, and controlling the challenge content. Use a PostgreSQL database and make it easy to run locally with a simple setup. I also want an admin only dashboard button, a hidden admin entry path, and basic anti abuse protections so only trusted browser origins can submit forms like login and answers.

Please make it polished enough to feel like a finished training platform, not just a demo, and if you need current docs for Flask or PostgreSQL integration, look them up online.