Require login in app.yaml.

Couple other tiny cleanups while I am at it.