updated app.yaml to accept web logins