HTTP/1.1 200 OK Server: nginx Date: Thu, 29 Jan 2026 03:25:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 41885 Connection: keep-alive Cache-Control: max-age=0, private, must-revalidate Content-Encoding: gzip Content-Security-Policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https: http:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; connect-src 'self' https: wss:; form-action 'self' https:; upgrade-insecure-requests; block-all-mixed-content Etag: W/"7898d6493b4eeca23228649034eb4db0" Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} Referrer-Policy: strict-origin-when-cross-origin Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Spx6pfiZbqiKgXnT3npxP6w%2BUWPjujFi%2FmJQwtBfuRw%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1769657130"}],"max_age":3600} Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Spx6pfiZbqiKgXnT3npxP6w%2BUWPjujFi%2FmJQwtBfuRw%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1769657130" Set-Cookie: _spendingNg_session=azJid2dTcnFWa29neHJqMTQzeFRLS1VEK0lwWGFWVmxYZVVOTGk5ZnZiQXVaZ0ZZVVBpL2lSa1JLbXZvZkl2Zm1QbVUxRVQzWm1vVFd6Z1BiSi8xTFBTekN2OFhxNzZZWjFjcmgyT0xqaENka25KczhvbmhhelE0aW8yaHdwYysyQjkwcFpDT2NPcHV2L1IzWW5LWENBPT0tLU5lVzZEbjVzeUlVK0twZk54NjFKcWc9PQ%3D%3D--814fc0f94274e55e0311aa6f421eb335a36736bb; path=/; HttpOnly Vary: Accept,Accept-Encoding Via: 1.1 heroku-router X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 4cfb2c14-ec31-2247-3c56-1711bea7a179 X-Runtime: 0.882687 X-Xss-Protection: 1; mode=block