Added GAE requirements doc in security

Added the Google App Engine requirements.
Why duplicate this section here? It would be better to *link* the "AppEngine" word at the top of the README (line 22) to the section in security.rst