anchor.diff:  	    case chef_otto:is_user_in_org(S, UserName, OrgName) of
   		true -> {true, Req1, State1};
   		false ->
  -		    Msg = bad_auth_message(not_member_of_org),
  +		    Msg = error_json(not_member_of_org),
   		    Json = ejson:encode(Msg),
                       Req2 = wrq:set_resp_body(Json, Req),
   		    {false, Req2, State1}
  
positive.code:                     {true, Req,
                       State1#state{couchbeam = S}};
                  {no_authn, Reason} ->
                      Msg = bad_auth_message(Reason),
                      Json = ejson:encode(Msg),
                      Req1 = wrq:set_resp_body(Json, Req),
                      % TODO This is a needless mutation
  
negative.code:     S = chef_otto:connect(),
      case chef_otto:fetch_user_or_client_cert(S, OrgName, UserName) of
          not_found ->
              NoCertMsg = error_json(no_cert),
              {false,
               wrq:set_resp_body(ejson:encode(NoCertMsg), Req), State};
          CertInfo ->
  