anchor.diff:  ;;; Login
   
   (defroute "/tootstest/login" ()
  +  "The  login  page   itself  is  hosted  here   to  ensure  same-domain
  +  interaction with  the API  calls. It's  mostly a  static page,  but we
  +  render it through the template engine.
  +
  +This page should have some more precise headers to assist in caching."
     (render #P"login.html"))
   
  -(defvar *google-public-key*)
  +(defvar *google-public-key* nil
  +  "The  public key  for Google's  OpenID signatures.  This is  cached to
  + validate the signatures provided by their servers.")
   
   (defun fetch-json (uri)
  +  "Fetch URI  as an application/json file  and parse it with  Yason into
  +a property list tree."
     (yason:parse
      (map 'string #'code-char
           (drakma:http-request uri :method :get :accept "application/json;charset=utf-8"))
  
positive.code:   "TODO: Split  id-token into three  parts on #\.  and pass in  with the
  public         key        from         Google.        Similar         to
  http://ncona.com/2015/02/consuming-a-google-id-token-from-a-server/ "
    :fixme)
  
  (define-constant +google-client-ids+
      '("1052481910502-4tkek5mbv4jf9o16oaclg1v3ugrruilg.apps.googleusercontent.com"
        "1052481910502-sumg845at7g627qdvhhhambm7c7do8e4.apps.googleusercontent.com")
    :test #'equalp)
  
  (defun user<-google-token (id-token)
    (multiple-value-bind
          (response-binary status response-headers response-uri
                           stream stream-closed-p status-reason)
  
negative.code: (in-package :cl-user)
  (defpackage tootstest.web
    (:documentation  "This package  contains  the  handlers that  directly
   handle  various URI  routes for  the web  server. These  are generally
   invoked currently via FastCGI, or a running Hunchentoot instance.")
    (:use :alexandria
          :cl
          :caveman2
  