From my initial perusal of the AppEngine stuff, it seems that using Google's authen/author is optional. It's not like Google could figure out if the forms your app is processing are login forms or not, so I don't see how it could be otherwise.