Require Flask-Security-Too 5.8.3 or later for the open redirect fix. (#10524)

5.8.3 fixes an open redirect in Flask-Security's default configuration
(GHSA-ccgp-pv8r-95wm). The fix is also in 5.9.1, but 5.9 needs Python
3.11 or later and removes get_post_login_redirect(), which pgAdmin
imports, so raise the lower bound within the 5.8 series instead.

requirements.txt

@@ -36,7 +36,9 @@ Flask-Security-Too==5.6.*; python_version <= '3.9'
 # 5.8.2 corrected the inverted UserMixin.is_locked() test in LoginForm;
 # User.is_locked() in web/pgadmin/model/__init__.py follows the fixed
 # semantics, so anything earlier in the 5.8 series would refuse all logins.
-Flask-Security-Too>=5.8.2,<5.9; python_version > '3.9'
+# 5.8.3 fixes an open redirect in the default configuration
+# (GHSA-ccgp-pv8r-95wm).
+Flask-Security-Too>=5.8.3,<5.9; python_version > '3.9'
 Flask-SocketIO==5.6.*
 Flask-SQLAlchemy==3.1.*
 Flask-WTF==1.2.*; python_version <= '3.9'