diff --git a/apps/web/src/lib/auth-actions.ts b/apps/web/src/lib/auth-actions.ts
index 0573ee8..33630c7 100644
--- a/apps/web/src/lib/auth-actions.ts
+++ b/apps/web/src/lib/auth-actions.ts
@@ -136,6 +136,7 @@ export async function changePasswordAction(
 
     // Forward new session cookie from API (mustChangePassword=false baked in)
     const setCookieHeader = response.headers.get('set-cookie');
+    console.log('[changePasswordAction] set-cookie header:', setCookieHeader);
     if (setCookieHeader) {
       const sessionMatch = setCookieHeader.match(/session=([^;]+)/);
       if (sessionMatch) {