update a comment to reflect that we can now override auth on
devappserver

Auditors: eliana