anchor.diff:      end;
   % logout by deleting the session
   handle_session_req(#httpd{method='DELETE'}=Req) ->
  -    Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}, cookie_scheme(Req)]),
  +    Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}] ++ cookie_scheme(Req)),
       {Code, Headers} = case couch_httpd:qs_value(Req, "next", nil) of
           nil ->
               {200, [Cookie]};
  
positive.code:                 ]});
          _Else ->
              % clear the session
              Cookie = mochiweb_cookies:cookie("AuthSession", "", [{path, "/"}, cookie_scheme(Req)]),
              send_json(Req, 401, [Cookie], {[{error, <<"unauthorized">>},{reason, <<"Name or password is incorrect.">>}]})
      end;
  % get user info
  
negative.code:     Hash = crypto:sha_mac(Secret, SessionData),
      mochiweb_cookies:cookie("AuthSession",
          couch_util:encodeBase64Url(SessionData ++ ":" ++ ?b2l(Hash)),
          [{path, "/"}] ++ cookie_scheme(Req)).
  
  hash_password(Password, Salt) ->
      ?l2b(couch_util:to_hex(crypto:sha(<<Password/binary, Salt/binary>>))).
  