Unsecured app.yaml URLs for testing