anchor.diff:      S = chef_otto:connect(),
       case chef_otto:fetch_user_or_client_cert(S, OrgName, UserName) of
           not_found ->
  -            NoCertMsg = bad_auth_message(no_cert),
  +            NoCertMsg = error_json(no_cert),
               {false,
                wrq:set_resp_body(ejson:encode(NoCertMsg), Req), State};
           CertInfo ->
  
positive.code:         {true, Req, State#state{organization_guid = OrgGuid, solr_query = Query}}
      catch
          throw:org_not_found ->
              NoOrg = bad_auth_message(org_not_found),
              Req1 = wrq:set_resp_body(ejson:encode(NoOrg), Req),
              {false, Req1, State}
      end.
  
negative.code:                     {true, Req,
                       State1#state{couchbeam = S}};
                  {no_authn, Reason} ->
                      Msg = error_json(Reason),
                      Json = ejson:encode(Msg),
                      Req1 = wrq:set_resp_body(Json, Req),
                      % TODO This is a needless mutation
  