remove login:required from app.yaml