anchor.diff:      end;
   % logout by deleting the session
   handle_session_req(#httpd{method='DELETE'}=Req) ->
  -    Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}, cookie_scheme(Req)]),
  +    Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}] ++ cookie_scheme(Req)),
       {Code, Headers} = case couch_httpd:qs_value(Req, "next", nil) of
           nil ->
               {200, [Cookie]};
  
positive.code:     Hash = crypto:sha_mac(Secret, SessionData),
      mochiweb_cookies:cookie("AuthSession",
          couch_util:encodeBase64Url(SessionData ++ ":" ++ ?b2l(Hash)),
          [{path, "/"}, cookie_scheme(Req)]).
  
  hash_password(Password, Salt) ->
      ?l2b(couch_util:to_hex(crypto:sha(<<Password/binary, Salt/binary>>))).
  
negative.code:     NowMS * 1000000 + NowS.
  
  cookie_scheme(#httpd{mochi_req=MochiReq}) ->
      [{http_only, true}] ++
      case MochiReq:get(scheme) of
          http -> [];
          https -> [{secure, true}]
      end.
  