Add a Vary header to ensure caching takes Accepts into account
Remove ORDER BY clause when recalculating the payout

Turns out SQLite can handle it just fine. but real DBs throw a fit.
Fix a bug where users couldn't log in via Brave Auth if they had a group removed.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>