add bandit to testing suite

bandit can check the code for common security issues

investigate if this could be useful