anchor.diff:  
     if CheckPwd(Username, Password) then
     begin
  -    // store data in session
  +    // store username in session
       Request.Session.Content.Values['form:username'] := Username;
  -    Request.Session.Content.Values['form:password'] := Password;
  -    // success: redirect to same page
  -    Response.Redirect('login');
  +    // success: redirect to home page
  +    Response.Redirect(Request.Document);
     end else begin
       // bad user/password: return authentication error
       Response.ResponseNo := 401;
  
positive.code:     + '    <title>Form based login example</title>' + #13
      + '  </head>' + #13
      + '  <body>' + #13
      + '    <form method="post" action="login">' + #13
      + '     <input type="text" name="username" required>' +#13
      + '     <input type="password" name="password" required>' + #13
      + '     <input type="submit" name="submit" value="Login">' + #13
  
negative.code:     + '  </head>' + #13
      + '  <body>' + #13
      + '    <p>you are logged in</p>' + #13
      + '    <form method="post">' + #13
      + '     <input type="submit" name="submit" value="Logout">' + #13
      + '    </form>' + #13
      + '  </body>' + #13
  