The Users API provides functions for constructing URLs that allow the user to sign in or sign out, then be redirected back to your application. [`users.create_login_url()`](https://docs.cloud.google.com/appengine/docs/standard/python3/reference/services/bundled/google/appengine/api/users/CreateLoginURL) and [`users.create_logout_url()`](https://docs.cloud.google.com/appengine/docs/standard/python3/reference/services/bundled/google/appengine/api/users/CreateLogoutURL) each take a destination URL for the application, and return a URL for signing in or signing out that redirects back to the given URL afterward.

The development web server simulates Google Accounts using its own sign-in and sign-out facilities. When you sign in to your application on the development web server, the server prompts you for an email address to use for the session. See [The Development Web Server](https://docs.cloud.google.com/appengine/docs/standard/tools/using-local-server) for more information. > [!TIP] > **Tip:** An easy way to restrict access to a part of your application to signed in users is to use the `login: required` element for the URL handler. See the [`app.yaml` reference](https://docs.cloud.google.com/appengine/docs/standard/reference/app-yaml#handlers_login) for more details.