anchor.diff:        ((not self-author-p)
          (permission-denied))
   
  -      ((not (first fb-user-friends-permission))
  -       (facebook-friends-permission-html
  -             :redirect-uri (strcat "gratitude/" id)
  -             :re-request (eql (second fb-user-friends-permission) :declined)
  -             :cancel-link (strcat "gratitude/" id)
  -             :fb-gratitude-subjects possible-fb-friends-to-tag))
  -
  -      (possible-fb-friends-to-tag
  -       (tag-facebook-friends-html
  -         :gratitude-id id
  -         :fb-gratitude-subjects (mapcar (lambda (id) (cons (db id :name)
  -                                                           id))
  -                                        possible-fb-friends-to-tag)))
  -
  +      ;; Tagging is convoluted until Facebook changes it's API to allow apps to pass
  +      ;; FB user ids to tag an item. Now they only pass a special token that prevents
  +      ;; us from verifying that a gratitude recipient is also a facebook friend.
  +
  +     ;((not (first fb-user-friends-permission))
  +     ; (facebook-friends-permission-html
  +     ;       :redirect-uri (strcat "gratitude/" id)
  +     ;       :re-request (eql (second fb-user-friends-permission) :declined)
  +     ;       :cancel-link (strcat "gratitude/" id)
  +     ;       :fb-gratitude-subjects possible-fb-friends-to-tag))
  +
  +     ;(possible-fb-friends-to-tag
  +     ; (tag-facebook-friends-html
  +     ;   :gratitude-id id
  +     ;   :fb-gratitude-subjects (mapcar (lambda (id) (cons (db id :name)
  +     ;                                                     id))
  +     ;                                  possible-fb-friends-to-tag)))
         (t (not-found)))))
   
   (defun post-gratitude
     (id
      &aux (url (strcat "/gratitude/" id))
  -        (friends-to-tag (when (post-parameter "tag-friends")
  -                          (post-parameter-integer-list "tag-fb-friend"))))
  +       ;(friends-to-tag (when (post-parameter "tag-friends")
  +       ;                  (post-parameter-integer-list "tag-fb-friend")))
  +       )
     (require-user (:require-active-user t :allow-test-user t)
       (setf id (parse-integer id))
       (aif (db id)
  
positive.code:           (delete-gratitude id)
            (flash "Your statement of gratitude has been deleted!")
            (see-other (or (post-parameter "next") "/home")))
           (friends-to-tag
            (tag-facebook-friends id friends-to-tag)
            (see-other url))
           ((post-parameter "edit")
            (see-other (s+ url "/edit")))))
        (not-found))))
  
negative.code:                           "when they reactivate their account.")
                        "Your statement of gratitude has been posted"))
               (see-other
                 (or (when (and (post-parameter "publish-facebook")
                               ;facebook-recipients
                                )
                       (flash "Your statement of gratitude has been published on Facebook")
                       (apply #'url-compose
                              (strcat "gratitude/" new-id)
                             ;(flatten
                             ;  (mapcar (lambda (id)
                             ;            (cons "authorize-fb-friend-tag"
                             ;                  (strcat id)))
                             ;          facebook-recipients))
                              ))
                     next
                     (if inactive-subject
                       "/home"
  