anchor.diff:  			if (httpRequest.getMethod() == "POST" && arrayFind(params, application.ESAPI.securityConfiguration().getUsernameParameterName()) && arrayFind(params, application.ESAPI.securityConfiguration().getPasswordParameterName())) {
   				return true;
   			}
  -			
  +
   			return false;
   		</cfscript>
   	</cffunction>
  
positive.code: 			return true;
  		</cfscript>
  	</cffunction>
  	
  	<cffunction returntype="boolean" name="isLoginAttempt" output="false">
  		<cfscript>
  			var httpRequest = application.ESAPI.currentRequest();
  
negative.code: 				application.ESAPI.httpUtilities().setNoCacheHeaders(httpResponse);
  			}
  			catch(Any e) {
  				application.ESAPILogger.error(application.ESAPIUtils.getSecurityType("SECURITY_FAILURE"), false, "Error in ESAPI4CF setupRequest: " & e.message, e);
  				// let's rethrow this error so your global error handler catches it if you have one
  				// not sure why throw chokes on 'Expression'
  				if (e.type == "Expression") {
  