anchor.diff:  login_with_access_token(_AccessToken, _Issuer) ->
       {error, bad_token}.
   
  -login_with_rsp(Rsp, SessionPid) ->
  -    {Issuer, Subject} = watts_rsp:get_iss_sub(Rsp),
  -    Token = #{access => #{token => <<"RSP">>}},
  -    update_session(Issuer, Issuer, Subject, Token, SessionPid).
  -
   
   session_for_rsp(Rsp) ->
       Provider = watts_rsp:get_provider(Rsp),
       SessType = watts_rsp:session_type(Rsp),
       {ServiceId, Params} = watts_rsp:get_service_data(Rsp),
  -    %% ValidService = is_allowed_service(ServiceId, Rsp),
  -    ValidService = true,
       ProviderEnabled = not is_provider_disabled(Provider),
       NoProvider = (Provider == undefined),
       ValidProvider = NoProvider or ProviderEnabled,
  -    rsp_session_or_error(ValidService and ValidProvider,
  +    rsp_session_or_error(ValidProvider,
                               ServiceId, Params, Provider, Rsp, SessType).
   
   
  
positive.code:     ok = watts_session:set_rsp(Rsp, SessPid),
      ok = watts_session:set_redirection(ServiceId, Params, Provider,
                                         SessPid),
      {ok, SessPid};
  rsp_session_or_error(false, _, _, _, _, _) ->
      {error, bad_request}.
  
  
  session_with_error(Msg) ->
  
negative.code:                                    msg => UsrMsg} }
              };
          {{ok, _}, oidc, true} ->
              logout_rsp_session(Session),
              {error, #{result => error, user_msg => DoneMsg}};
          {{ok, _}, oidc, _} ->
              logout_rsp_session(Session),
              {error, #{result => error, user_msg => OffMsg}};
          {{ok, _}, rest, _} ->
              logout_rsp_session(Session),
              {error, #{result => error, user_msg => RestMsg}};
          _ ->
              WMsg = "SESS~p additional login request for ~p failed: ~s",
              lager:warning(WMsg, [SessionId, ServiceId, Provider]),
              logout_rsp_session(Session),
              {error, #{result => error, user_msg => Msg}}
      end;
  handle_credential_result({error, Map}, ServiceId, Session, _Params)
  