anchor.diff:      {ok, Client2} = cowboy_client:request(Method, build_url(<<"/">>, Config), Headers, Client),
       cowboy_client:response(Client2).
   
  +preflight(Headers, Config) ->
  +    request(<<"OPTIONS">>, Headers, Config).
  +
   %% Tests
   
  -simple_no_origin_get(Config) ->
  +standard_no_origin_get(Config) ->
       {ok, 200, Headers, _} = request(<<"GET">>, [], Config),
       false = lists:keyfind(<<"access-control-allow-origin">>, 1, Headers).
   
  -simple_get(Config) ->
  +standard_no_origin_options(Config) ->
  +    {ok, 200, Headers, _} = request(<<"OPTIONS">>, [], Config),
  +    false = lists:keyfind(<<"access-control-allow-origin">>, 1, Headers).
  +
  +standard_get(Config) ->
       Origin = <<"http://banned.example.com">>,
       {ok, 200, Headers, _} = request(<<"GET">>, [{<<"Origin">>, Origin}], Config),
       false = lists:keyfind(<<"access-control-allow-origin">>, 1, Headers).
   
  +standard_options(Config) ->
  +    Origin = <<"http://banned.example.com">>,
  +    {ok, 200, Headers, _} = request(<<"OPTIONS">>, [{<<"Origin">>, Origin}], Config),
  +    false = lists:keyfind(<<"access-control-allow-origin">>, 1, Headers).
  +
   simple_allowed_get(Config) ->
       Origin = <<"http://allowed.example.com">>,
       {ok, 200, Headers, _} =
  
positive.code:     {_, Origin} = lists:keyfind(<<"access-control-allow-origin">>, 1, Headers),
      {_, <<"x-exposed">>} = lists:keyfind(<<"access-control-expose-headers">>, 1, Headers),
      {_, <<"true">>} = lists:keyfind(<<"access-control-allow-credentials">>, 1, Headers).
  
negative.code: groups() ->
      [
       {default, [parallel], [
                              standard_no_origin_get,
                              standard_no_origin_options,
                              standard_get,
                              standard_options,
                              preflight_method,
                              preflight_header
                             ]},
       {policy, [parallel], [
                             standard_no_origin_get,
                             standard_no_origin_options,
                             standard_get,
                             standard_options,
                             simple_allowed_get,
                             simple_allowed_credentials_get,
                             preflight_method,
                             preflight_no_method,
                             preflight_allowed_method,
                             preflight_credentials,
                             preflight_allowed_header,
                             preflight_allowed_header_webkit
                            ]}
      ].
  
  