anchor.diff:              end;
   
           _ ->
  -			case Auth of
  -				Props when is_list(Props) ->
  -					http_req_authed(Req, DocRoot, M, Qs, Auth);
  -				undefined ->
  +			% for all methods other than stat, require auth if jsonp= is used.
  +			case Authenticated of
  +				{true, AuthProps} ->
  +					http_req_authed(Req, DocRoot, M, Qs, AuthProps);
  +				{false, _} ->
   					Req:respond({403, [], <<"<h1>Not Authorised</h1>">>})
   			end
       end.
  
positive.code:                             %]}}
                          ]},
                      respond(Req, R);
                  undefined ->
                      R = {struct, [
                              {"name", <<"playdar">>},
                              {"version", <<"0.1.0">>},
  
negative.code: 
  http_req(Req, DocRoot) ->
      Qs = Req:parse_qs(),
  	JsonP = proplists:get_value("jsonp", Qs, ""),
      M = proplists:get_value("method", Qs),
      Auth = playdar_auth:check_auth(proplists:get_value("auth",Qs,"")),
  	% If you are using jsonp callbacks, we verify your authcode:
  	Authenticated = case JsonP of
  						"" -> {true, []};
  						_  -> case Auth of
  								  A when is_list(A) -> {true, A};
  								  undefined -> {false, []}
  							  end
  					end,
      case M of
          "stat" ->
              case Authenticated of
                  {true, _Props} ->
                      R = {struct,[   
                              {"name", <<"playdar">>},
                              {"version", <<"0.1.0">>},
  