I've posted code here:

credential checker --> https://gist.github.com/minskmaz/ab218d7b137b24ede8ffc7e3ea6e2392#file-credentialchecker-py

realm.py --> https://gist.github.com/minskmaz/ab218d7b137b24ede8ffc7e3ea6e2392#file-realm-py

session wrapper --> https://gist.github.com/minskmaz/ab218d7b137b24ede8ffc7e3ea6e2392#file-webauthsessionwrapper-py

As I point out on line 14 of realm.py the checker is matching a password against the db but its requestAvatarId (line 10 of credentialChecker.py ) is returning None to requestAvatar 

Any guidance warmly welcomed.

Jonah