anchor.diff:  
       case catch mod_auth:get_user(UserName, [{dir, ?directory}, {port, Port}]) of
           {ok, #httpd_user{password = Password}} ->
  -            Cookie   = createCookie(Env, UserName, Key),
  -            HtmlPage = setCookie("eSessionId", Cookie, redirect("index", Env)),
  -            {reply, HtmlPage, State};
  +            Cookie    = createCookie(Env, UserName, Key),
  +            Referer   = default(getCookie("eReferer", Env), "index"),
  +            HtmlPage1 = setCookie("eSession", Cookie, redirect(Referer, Env)),
  +            HtmlPage2 = removeCookieIfPresent("eReferer", Env, HtmlPage1),
  +            {reply, HtmlPage2, State};
           _ ->
  -            HtmlPage = removeCookie("eSessionId", redirect("login", Env)),
  +            HtmlPage = removeCookie("eSession", redirect("login", Env)),
               {reply, HtmlPage, State}
       end;
   
  
positive.code: 
  getUser(Env, Key) ->
      try
          Cookie      = default(getCookie("eSessionId", Env),
                                createCookie(Env, "", Key)),
          Binary1     = base64:decode(Cookie),
          Binary2     = decrypt(Key, Binary1),
  
negative.code: %% @spec userOK(User, Message) -> true | false.
  %% @end
  %%--------------------------------------------------------------------
  userOK(_User, _Message, "")                                       -> false;
  userOK(_User, {show, _SessionId, _Env, _Input}, _WUser)           -> true;
  userOK(_User, {showTimeReport, _SessionId, _Env, _Input}, _WUser) -> true;
  userOK(_User, {link, _SessionId, _Env, _Input}, _WUser)           -> true;
  