anchor.diff:      Issuer = << <<"rsp-">>/binary, I/binary >>,
       {Issuer, S}.
   
  -get_return_url(#watts_rsp{ use_referer = true,
  -                           session = #watts_rsp_session{ referer = R }}) ->
  +get_return_url(#watts_rsp{session = Session}) ->
  +    session_return_url(Session).
  +
  +session_return_url(#watts_rsp_session{ referer = R, success_url = undefined }) ->
       R;
  -get_return_url(#watts_rsp{ use_referer = false, return_url = Url}) ->
  -    Url.
  +session_return_url(#watts_rsp_session{ success_url = R }) ->
  +    R.
  +
   
   get_service_data(#watts_rsp{ session = #watts_rsp_session{ service_id = Id,
                                                              params = Param}}) ->
  
positive.code: 
  
  
  has_valid_return(#watts_rsp{use_referer = UseReferer, return_url = ReturnUrl,
                              session = #watts_rsp_session{ referer = Ref }}) ->
      ValidRefer = UseReferer and is_url(Ref),
      ValidReturn = (not UseReferer) and is_url(ReturnUrl),
      ValidRefer or ValidReturn.
  
  is_url(<< Https:8/binary, _Rest/binary>>) when Https == <<"https://">> ->
      true;
  is_url(<< Http:7/binary, _Rest/binary>>) when Http == <<"http://">> ->
      true;
  is_url(Url) when is_list(Url) ->
      is_url(list_to_binary(Url));
  is_url(_) ->
      false.
  
  update_rsp_on_success({Claims, Rsp}, Referer) when is_map(Claims) ->
      Issuer = jwt_get_issuer(Claims),
      Subject = jwt_get_subject(Claims),
      ServiceId = jwt_get_service_id(Claims),
  
negative.code:           keys = [],
            disable_login = false,
            disable_ui = false,
            base_url = undefined,
  
            session = #watts_rsp_session{}
           }).
  