anchor.diff:  			// so you would have to move this to the appropriate location
   			application.ESAPI = createObject("component", "org.owasp.esapi.ESAPI").init("/esapi4cf/demo/basic/WEB-INF/esapi-resources/");
   
  +			// utility function for ESAPI
  +			application.ESAPIUtils = createObject("component", "org.owasp.esapi.util.Utils");
  +
   			// define an application specific logger instance
   			// you can use this to log custom errors to the ESAPI4CF Logger at any place throughout your application
   			application.ESAPILogger = application.ESAPI.getLogger(application.applicationName & "-Logger");
  
positive.code: 			if (httpRequest.getMethod() == "POST" && arrayFind(params, application.ESAPI.securityConfiguration().getUsernameParameterName()) && arrayFind(params, application.ESAPI.securityConfiguration().getPasswordParameterName())) {
  				return true;
  			}
  			
  			return false;
  		</cfscript>
  	</cffunction>
  
negative.code: 			return true;
  		</cfscript>
  	</cffunction>
  
  	<cffunction returntype="boolean" name="isLoginAttempt" output="false">
  		<cfscript>
  			var httpRequest = application.ESAPI.currentRequest();
  