anchor.diff:  <%@ page session="false" language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>
   <%@ page import="java.security.Principal"%>
  +<%@ page import="java.util.Enumeration"%>
   <%@ page import="javax.servlet.http.Cookie"%>
   <%@ page import="org.skyve.CORE"%>
  +<%@ page import="org.skyve.metadata.customer.Customer"%>
   <%@ page import="org.skyve.metadata.user.User"%>
   <%@ page import="org.skyve.metadata.repository.Repository"%>
   <%@ page import="org.skyve.metadata.router.UxUi"%>
  
positive.code: <%@ page import="org.skyve.impl.util.UtilImpl"%>
  
  <%
  	// Stop cookie/request header injection by checking the customer name
  	Repository repository = CORE.getRepository();
  	String customerName = request.getParameter(AbstractWebContext.CUSTOMER_COOKIE_NAME);
  	if (customerName != null) {
  		// This will throw if the customerName value ain't a customer name
  		try {
  			repository.getCustomer(customerName);
  		}
  		catch (Exception e) {
  			customerName = null;
  
negative.code: 				throw new IllegalStateException("Malformed URL - this URL must have a 'c' parameter");
  			}
  			else {
  				// This will throw or return null if the customerName value ain't a valid customer name
  				try {
  					Customer customer = repository.getCustomer(customerName);
  					if (customer == null) {
  						throw new IllegalStateException("Malformed URL - this URL must have a 'c' parameter with a valid customer");
  					}
  				}
  				catch (Exception e) {
  					throw new IllegalStateException("Malformed URL - this URL must have a 'c' parameter with a valid customer", e);
  