anchor.diff:        FAuthServer.HandleRequest(AContext, request, session, response)
       else if request.Document = '/' then
         ReturnProcessedFile(response, session, '/hompage.html', AltFile('/homepage.html'), true)
  -    else if OWinSecurity and (request.Document = FSecurePath+OWIN_TOKEN_PATH) then
  -      HandleOWinToken(AContext, true, request, response)
       else
       begin
         handled := false;
  
positive.code: 
      else if request.Document.StartsWith(AppendForwardSlash(FBasePath)+'websockets', false) then
        HandleWebSockets(AContext, request, response, false, false, FBasePath)
      else if OWinSecurity and ServerContext.UserProvider.AllowInsecure and (request.Document = FBasePath+OWIN_TOKEN_PATH) then
        HandleOWinToken(AContext, false, request, response)
      else if request.Document.StartsWith(FBasePath, false) then
        HandleRequest(AContext, request, response, false, false, FBasePath)
      else if request.Document.StartsWith(AppendForwardSlash(FBasePath)+'FSecurePath', false) then
  
negative.code:       if request.RawHeaders.Values['Access-Control-Request-Headers'] <> '' then
          response.CustomHeaders.add('Access-Control-Allow-Headers: '+request.RawHeaders.Values['Access-Control-Request-Headers']);
      end
      else if OWinSecurity and ServerContext.UserProvider.AllowInsecure and (request.Document = FBasePath+OWIN_TOKEN_PATH) then
        HandleOWinToken(AContext, false, request, response)
      else if FileExists(AltFile(request.Document)) then
        ReturnSpecFile(response, request.Document, AltFile(request.Document))
      else if request.Document.EndsWith('.hts') and FileExists(ChangeFileExt(AltFile(request.Document), '.html')) then
  