anchor.diff:  	case call(Req, State, is_authorized) of
   		no_call ->
   			forbidden(Req, State);
  -		{true, Req2, HandlerState2} ->
  -			forbidden(Req2, State#state{handler_state=HandlerState2});
  -		{{false, AuthHead}, Req2, HandlerState2} ->
  +		{true, Req2, HandlerState} ->
  +			forbidden(Req2, State#state{handler_state=HandlerState});
  +		{{false, AuthHead}, Req2, HandlerState} ->
   			{ok, Req3} = cowboy_http_req:set_resp_header(
   				<<"Www-Authenticate">>, AuthHead, Req2),
  -			respond(Req3, State#state{handler_state=HandlerState2}, 401)
  +			respond(Req3, State#state{handler_state=HandlerState}, 401)
   	end.
   
   forbidden(Req, State) ->
  
positive.code: 	case call(Req, State, charsets_provided) of
  		no_call ->
  			set_content_type(Req, State);
  		{[], Req2, HandlerState2} ->
  			not_acceptable(Req2, State#state{handler_state=HandlerState2});
  		{CP, Req2, HandlerState2} ->
  			State2 = State#state{handler_state=HandlerState2, charsets_p=CP},
  			{AcceptCharset, Req3} =
  				cowboy_http_req:parse_header('Accept-Charset', Req2),
  			case AcceptCharset of
  
negative.code: 			next(Req, State, fun malformed_request/2);
  		no_call ->
  			method_not_allowed(Req, State, ['GET', 'HEAD']);
  		{List, Req2, HandlerState} ->
  			State2 = State#state{handler_state=HandlerState},
  			case lists:member(Method, List) of
  				true -> next(Req2, State2, fun malformed_request/2);
  				false -> method_not_allowed(Req2, State2, List)
  