修改web.xml 禁止访问/_ah/admin

  <!-- Security constraint: require admin access for the appstats url -->
  <security-constraint>
    <web-resource-collection>
      <url-pattern>/appstats/*</url-pattern>
      <url-pattern>/convert/</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>admin</role-name>
    </auth-constraint>
  </security-constraint>

在下面添加：

  <security-constraint>
    <web-resource-collection>
      <url-pattern>/login/google</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>*</role-name>
    </auth-constraint>
  </security-constraint>

  <security-constraint>
    <web-resource-collection>
      <url-pattern>/_ah/admin/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    </auth-constraint>
  </security-constraint>

  <security-constraint>
    <web-resource-collection>
      <url-pattern>/_ah/login</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    </auth-constraint>
  </security-constraint>

重新运行Rundev.bat

改正,多谢okgo提醒