Actually Go Endpoints work on appspot too
Correctly working OAuth2, though it needs something like endpoints.CurrentUser()