simplify Hello World & use GAE authentication