HTTP/2 200 server: nginx date: Sat, 01 Aug 2026 22:45:13 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding x-frame-options: SAMEORIGIN x-xss-protection: 0 x-content-type-options: nosniff x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin x-discourse-route: categories/index vary: Accept cross-origin-opener-policy: same-origin-allow-popups cache-control: no-cache, no-store content-security-policy: upgrade-insecure-requests; base-uri 'self'; object-src 'none'; script-src 'nonce-Ax3F3ziMhaoL8jiGQo9AyfSig' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob: https://global.discourse-cdn.com/gozwift/assets/; frame-ancestors 'self'; manifest-src 'self' x-discourse-cached: skip x-request-id: ffd1368a-522f-4033-8b73-05aa05f99a65 x-discourse-trackview: 1 content-encoding: gzip cdck-proxy-id: app-router-tieadvanced06.sea2 strict-transport-security: max-age=31536000 cdck-proxy-id: app-balancer-tieinterceptor1b.sea2