Creating a protected website with appengine and go