http://matcher.gritsgame.appspot.com/start-game is not protected

[GoogleCodeExporter]

What steps will reproduce the problem?
1. open browser
2. paste the link "http://matcher.gritsgame.appspot.com/start-game"
3. open "http://matcher.gritsgame.appspot.com/debug" to vertify that new game 
is created

What is the expected output? What do you see instead?
When hitting the URL "http://matcher.gritsgame.appspot.com/start-game", new 
game is generated. No authentication is made


What version of the product are you using? On what operating system?
Platform indenpendent


Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 2 Sep 2012 at 3:34