Returned ProjectSurvey create to checkIsUser.
The access protection is properly done by the form validator.
A list of bugs is available in the Google App Engine SDK project on Google Code.The issue tracker is at http://code.google.com/p/googleappengine/issues/.