Rip out webapp2_extras.auth, webapp2_extras.session