def add_auth_to_response(response, request=None, user=ANON):
    if request is None:
        return  # early parsing must've failed
    if request.line.uri.startswith('/assets/'):
        return  # assets never get auth headers

    if request.headers.cookie in SESSION:
        if not user.ANON:
            user.keep_signed_in(response.headers.cookie)
dataset/ETHPy150Open gratipay/gratipay.com/gratipay/security/authentication.py/add_auth_to_response/swapped operands of `in`