Removing SSL support was a "get it working" patch, definitely not the ideal solution. My hope is that someone with more know-how about the CherryPy internals will figure out a better solution.

I'm a little stuck with CherryPy+GAE right now since sessions don't want to work. I need to dig back into that at some point.