Since Google App Engine cron does not support native http auth, this is secured with their own home grown auth in cron.yaml.

See:
https://developers.google.com/appengine/docs/python/config/cron
Securing URLs for cron