Sign-in now required to view the example gallery

The example-app render endpoint used by the dev page gallery was reachable without a session, so the gallery could be enumerated by anyone. It now requires sign-in. The in-app experience is unchanged for signed-in users.