Generally want:
WSGIScriptAlias /flask_test/ /var/www/flask_test/flask_test.wsgi
No trailing slash on the mount point for a sub URL.
Worse is that you have:
Deny from all
So you are explicitly telling Apache to return forbidden.
You should have:
Allow from all
in that context.