anchor.diff:      url: http://uaa.vcap.example.net/login.do
   ```
   
  -There is also an environment variable (or Java System property), `LOGIN_SECRET`, for the client secret that the app uses when it authenticates itself with the UAA.
  +An environment variable or Java System property also exists, `LOGIN_SECRET`, for the client secret that the app uses when it authenticates itself with the UAA.
   The login app is registered by default in the UAA only if there are no active Spring profiles.
   In the UAA, the registration is located in the `oauth-clients.xml` config file:
   
  
positive.code: 
          GET /login
  
      The sample app presents a form login interface for the backend UAA, and an OpenID widget where a user can authenticate using Google credentials or others.
  
  2. Approve OAuth2 token grant:
  
          GET /oauth/authorize?client_id=app&response_type=code...
  
      Standard OAuth2 Authorization Endpoint. The UAA handles client credentials and all other features in the back end, and the login application is used to render the UI.
  
  3. Obtain access token:
  
  
negative.code:     </tr>
      <tr>
        <td><code>oauth.login</code></td>
        <td>This scope is used to indicate a login app, such as external login servers, can perform trusted operations, such as creating users not authenticated in the UAA.</td>
      </tr>
      <tr>
        <td><code>approvals.me</code></td>
  