anchor.diff:      </tr>
   
       <tr>
  -    <td>disable gzip_static and gunzip modules so that...</td>
  +    <td>disable gzip_static and gunzip modules</td>
       <td>add this line to the <code>Staticfile</code>:<br><code><strong>directory: visible</strong></code></td>
       <td><a href="#gzip">GZip</a></td>
       </tr>
   
       <tr>
       <td valign="top">enable basic authentication for your app or website</td>
  -    <td>  1. create a hashed username and password pair for each user, using a site like <a href="http://www.htaccesstools.com/htpasswd-generator/">Htpasswd Generator</a><br>
  -  &#50;. create a file called <code>Staticfile.auth</code> in the root directory or alternative root directory and add one or more user/password lines to it. 
  -    For example,<br> <code>bob:$apr1$DuUQEQp8$ZccZCHQElNSjrg.erwSFC0<br>alice:$apr1$4IRQGcD/$.UMFLnIHSD9ZHJ86TR4zx.</code><br>
  +    <td>  1. Create a hashed username and password pair for each user, using a site like <a href="http://www.htaccesstools.com/htpasswd-generator/">Htpasswd Generator</a><br>
  +  &#50;. Create a file named <code>Staticfile.auth</code> in the root directory or alternative root directory, and add one or more user/password lines to it. 
  +    For example,<br> <code>bob:$apr1$DuUQEQp8$ZccZCHQElNSjrgerwSFC0<br>alice:$apr1$4IRQGcD/$UMFLnIHSD9ZHJ86TR4zx</code><br>
       </td>
       <td><a href="#basic-auth">Basic authentication</a></td>
       </tr>
   
       <tr>
       <td>use a proxy for downloading dependencies during staging</td>
  -    <td>Set the <code>http_proxy</code> and <code>https_proxy</code> environment variables.</td>
  +    <td>set the <code>http_proxy</code> and <code>https_proxy</code> environment variables.</td>
       <td><a href="../proxy-usage.html">Proxy support</a></td>
       </tr>
   
       <tr>
       <td>force HTTPS</td>
  -    <td>add the line<br><code><strong>FORCE_HTTPS: true</strong></code> to a file called <code>nginx.conf</code> in your root directory or alternate root directory.
  -    <p class="note"><strong>Note</strong>: Do not enable <code>FORCE_HTTPS</code> if you are have a proxy server or load balancer that terminates SSL/TLS. 
  +    <td>add the line<br><code><strong>FORCE_HTTPS: true</strong></code> to a file named <code>nginx.conf</code> in your root directory or alternate root directory.
  +    <p class="note"><strong>Note</strong>: Do not enable <code>FORCE_HTTPS</code> if you have a proxy server or load balancer that terminates SSL/TLS. 
   Doing so can cause infinite redirect loops, for example, 
   if you use <a href="https://support.cloudflare.com/hc/en-us/articles/200170416">Flexible SSL</a> with CloudFlare.</p></td>
       <td><a href="#force-https">Force HTTPS</a></td>
  
positive.code: 
  <tr>
    <td>Force HTTPS</td>
     <td>A way to enforce that all requests are sent via HTTPS. 
         This redirects non-HTTPS requests as HTTPS requests. 
         For an example of when to avoid forcing HTTPS, see <a href="#force-https">About FORCE_HTTPS with Reverse Proxies</a> below.</td>
  </tr>
  
  <tr>
    <td id="strict-security">HTTP Strict Transport Security</td>
    <td>Causes Nginx to respond to all requests with the header
   <code>Strict-Transport-Security: max-age=31536000</code>, thus forcing browser to make all subsequent requests over HTTPS.</td>
  </tr>
  
  <tr>
  
negative.code: 
  <tr>
    <td id="gzip">GZip file serving and compressing</td>
  <td>The <a href="http://nginx.org/en/docs/http/ngx_http_gzip_static_module.html">gzip_static</a> 
  and <a href="http://nginx.org/en/docs/http/ngx_http_gunzip_module.html">gunzip</a> modules are enabled by default. This allows Nginx to serve files stored in compressed GZ format, and to uncompresses them for clients that do not support compressed content or responses. <br>You may want to disable compression in particular circumstances, for example if serving to very old browser clients.</td>
  </tr>
  
  <tr>
  