anchor.diff:          A1 Injection
        <% end %>
       </li>
  +	<li id="broken_auth">
  +      <%= link_to broken_auth_tutorials_path do %>
  +        <div class="icon">
  +          <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
  +        </div>
  +        A2 Broken Auth
  +      <% end %>
  +    </li>
       <li id="xss">
        <%= link_to xss_tutorials_path do %>
           <div class="icon">
             <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
           </div>
  -       A2 XSS
  +       A3 XSS
         <% end %>
       </li>
  -    <li id="broken_auth">
  -      <%= link_to broken_auth_tutorials_path do %>
  -        <div class="icon">
  -          <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
  -        </div>
  -        A3 Broken Auth
  -      <% end %>
  -    </li>
  +    
       <li id="insecure_dor">
         <%= link_to insecure_dor_tutorials_path do %>
           <div class="icon">
  
positive.code:         <div class="icon">
            <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
          </div>
          A9 SSL/TLS
        <% end %>
      </li>
      <li id="redirects">
  
negative.code:         A4 Insecure DOR
        <% end %>
      </li>
  	<li id="misconfig">
        <%= link_to misconfig_tutorials_path do %>
          <div class="icon">
            <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
          </div>
          A5 Misconfig
        <% end %>
      </li>
      <li id="sensitive_exposure">
        <%= link_to "#" do %>
          <div class="icon">
            <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
          </div>
          A6 Exposure
        <% end %>
      </li>
      <li id="access">
        <%= link_to url_access_tutorials_path do %>
          <div class="icon">
            <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
          </div>
          A7 Access
        <% end %>
      </li>
  	<li id="csrf">
        <%= link_to csrf_tutorials_path do %>
          <div class="icon">
            <span class="fs1" aria-hidden="true" data-icon="&#xe094;"></span>
          </div>
          A8 CSRF
        <% end %>
      </li>
      <li id="ssl_tls">
  