We can get away with it here - these two apps are only used to prove single-signon is working. Good for local dev environments and the like...