GAE implemented DefaultDomainSecurityInterceptor to be used on GAE