anchor.diff:      end.
   
   cookie_auth_header(#httpd{user_ctx=#user_ctx{name=null}}, _Headers) -> [];
  -cookie_auth_header(#httpd{user_ctx=#user_ctx{name=User}, auth={Secret, true}}, Headers) ->
  +cookie_auth_header(#httpd{user_ctx=#user_ctx{name=User}, auth={Secret, true}}=Req, Headers) ->
       % Note: we only set the AuthSession cookie if:
       %  * a valid AuthSession cookie has been received
       %  * we are outside a 10% timeout window
  
positive.code:     end;
  % logout by deleting the session
  handle_session_req(#httpd{method='DELETE'}=Req) ->
      Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}, {http_only, true}]),
      {Code, Headers} = case couch_httpd:qs_value(Req, "next", nil) of
          nil ->
              {200, [Cookie]};
  
negative.code:             % setup the session cookie
              Secret = ?l2b(ensure_cookie_auth_secret()),
              CurrentTime = make_cookie_time(),
              Cookie = cookie_auth_cookie(Req, ?b2l(UserName), <<Secret/binary, UserSalt/binary>>, CurrentTime),
              % TODO document the "next" feature in Futon
              {Code, Headers} = case couch_httpd:qs_value(Req, "next", nil) of
                  nil ->
  