fixed conflict between GAE and 2-factor authentication