If you upload your own user model, you will also need to do your own session processing; The App Engine user API creates login sessions for you behind the scenes.
In addition, although this should be obvious, you should not store the user's password in clear text; store the SHA-1 hash and compare it with the password hash of the user, which is entered at login.
source share