This page was served from the server because your session cookie was present. The home-screen app sends the same cookie on launch.
Fetched from /api/data, which returns
401 without a valid session cookie. The service worker
never caches this.