anchor.diff:  	   :accept "application/json"
   	   :additional-headers `(("Authorization" . ,(format nil "Basic ~A" authorization)))
   	   :parameters nil)
  -	(values (if (stringp result) result
  -		    (alexandria:alist-plist
  -		     (json:decode-json-from-string
  -		      (babel:octets-to-string result))))
  +	(values (alexandria:alist-plist
  +		 (json:decode-json-from-string result))
   		status)))))
   
   (defun exchange-authorization-code (code redirect-uri client-id client-secret &optional (grant-type "authorization_code"))
  
positive.code: 		(if (not (equalp status 200))
  		    "Invalid token"
  		    ;; else, check that the scopes are ok
  		    (let ((token-scopes (split-sequence:split-sequence #\ 
  								       (getf result :scopes))))
  		      (if (not (every (lambda (scope)
  					(member scope token-scopes :test #'equalp))
  				      (scopes authentication)))
  			  "Scope not sufficient")))))))))
  
  
  (defun verify-access-token (access-token)
  
negative.code: 	  (slot-value authentication 'scopes)))
  
  (defmethod authenticate ((authentication oauth2-authentication))
    (let* ((access-token (hunchentoot:header-in* "Authentication"))
  	(result
      ;; if there's no access token, error
      (if (not access-token)
  	"Provide the token"
  